Connect Secure · Vulnerability

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-118527 · CVE overview and exploitation status

cve-program · CVE-2026-118527

• https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US

• Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. · Newly collected advisory · 3 Nov 2026
• Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability · New CISA KEV listing observed · 30 Oct 2026